Windows XP SP2 Firewall Critical Update (886185)

2004-12-17T00:00:00
ID SMB_NT_886185.NASL
Type nessus
Reporter This script is Copyright (C) 2004-2018 Tenable Network Security, Inc.
Modified 2021-05-02T00:00:00

Description

The remote version of Microsoft Windows XP SP2 lacks the critical security update 886185.

This update fixes a flaw that renders the SP2 firewall ineffective when the user connects to the internet using a dialup connection.

                                        
                                            #
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(15996);
  script_version("1.16");
  script_cvs_date("Date: 2018/11/15 20:50:28");

  script_bugtraq_id(12057);

  script_name(english:"Windows XP SP2 Firewall Critical Update (886185)");
  script_summary(english:"Checks the remote registry for KB886185");

  script_set_attribute(
    attribute:'synopsis',
    value:
"The remote host has a flaw that could allow access controls to be
circumvented."
  );
  script_set_attribute(
    attribute:'description',
    value:
"The remote version of Microsoft Windows XP SP2 lacks the critical
security update 886185. 

This update fixes a flaw that renders the SP2 firewall ineffective
when the user connects to the internet using a dialup connection."
  );
  script_set_attribute(
    attribute:'solution',
    value:
"Apply the latest Windows XP service pack or the patch referenced in
KB886185."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No exploit is required");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:'see_also', value:"https://support.microsoft.com/en-us/help/886185");

  script_set_attribute(attribute:"vuln_publication_date", value:"2004/12/15");
  script_set_attribute(attribute:"plugin_publication_date", value:"2004/12/17");
  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe",value:"cpe:/o:microsoft:windows");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);

  script_copyright(english:"This script is Copyright (C) 2004-2018 Tenable Network Security, Inc.");
  script_family(english:"Windows");

  script_dependencies("smb_hotfixes.nasl");
  script_require_keys("SMB/Registry/Enumerated");
  exit(0);
}

include("smb_hotfixes.inc");


# Only XP SP2 affected
if ( hotfix_check_sp(xp:3) <= 0 ) exit(0);
if ( hotfix_check_sp(xp:2) > 0  ) exit(0);

if ( hotfix_missing(name:"886185") > 0 )
	security_hole(get_kb_item("SMB/transport"));